TPM Sealed Data Release Using Monotonic Counters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Trusted Platform Modules (TPM) lack the ability to restrict the use of sealed data beyond ensuring its integrity and authenticity, failing to prevent replay attacks and unauthorized access.
Innovation Solution
Implementing a TPM that seals data using monotonic counters, tick counters, or session parameters within a blob, ensuring data is only released when corresponding parameters match, thereby restricting further use and preventing replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the TPM releases sealed data based on PCR values, then data integrity is ensured, but the TPM cannot further restrict the use of sealed data
Solution Approach 1:
The patent segments the data release control mechanism by introducing separate monotonic counters for different usage dimensions (usage count, time, sessions). Each counter independently tracks a specific aspect of data usage, allowing fine-grained control over sealed data access without compromising integrity verification based on PCR values.
Solution Approach 2:
The patent implements dynamic control of sealed data usage through monotonic counters that can be configured with minimum and maximum values. The counters dynamically track usage patterns and automatically enforce restrictions, enabling adaptive security policies that respond to actual usage conditions rather than static access controls.
2Ease of operation
If the TPM allows unrestricted access to sealed data, then ease of operation is improved, but replay attacks and unauthorized access cannot be prevented
Solution Approach 1:
The patent applies preliminary action by configuring monotonic counters with minimum and maximum values before sealed data is released. These pre-set parameters establish usage boundaries in advance, automatically preventing replay attacks and unauthorized access without interfering with legitimate operations. The counters are initialized with security policies that proactively block harmful usage patterns.
Solution Approach 2:
The patent implements feedback mechanisms where monotonic counters continuously monitor sealed data usage and provide feedback to the TPM. When counter values exceed predefined thresholds or when unauthorized access patterns are detected, the system automatically responds by blocking further access, creating a closed-loop security system that adapts to usage conditions in real-time.
Data Source
AI summary
Embodiments of a method and system for creating sealed data are disclosed herein. A trusted platform module (TPM) is used to seal data and other information in a sealed blob. In one embodiment, a monotonic counter parameter is included in the sealed blob. In another embodiment, a tick counter parameter is included in the sealed blob. In yet another embodiment, a session parameter is included in the sealed blob. In each instance, the data is only released if the associated parameter included in the blob corresponds to a current parameter. Other embodiments are described and claimed.